James Coleman
2889766a20
Some checks failed
Go package / build (push) Has been cancelled
- Reject RPM, Debian, and Arch metadata that fails the configured signature policy before trusting its checksums or package paths. - Preserve the last verified repository generation when signed metadata rotates inconsistently or required files remain unavailable. - Let operators pin signer keyrings or retrieve unknown issuers from configured keyservers, including archived GnuPG v1 RSA signatures. - Gate cached server entry points and package misses until a crawl completes under the active signature policy. |
||
|---|---|---|
| .. | ||
| fetch.go | ||
| fetch_test.go | ||
| missing.go | ||
| missing_test.go | ||
| source.go | ||
| source_test.go | ||
| stats.go | ||